GitHub announces npm security changes to tackle supply-chain attacks

GitHub pulls pin on npm's auto-run scripts

Miasma worms its way onto GitHub as attack kit goes open source

GitHub disables Microsoft repos pushing password-stealing malware